I’ve got a pile of articles I want to get out before the end of 2025, and I’m trying to stick to at least one post per week. That’s roughly 16 more articles between now and December, which sounds doable if I don’t get distracted by shiny new projects.

Using Github Actions to audit pip library versions

I’ve got several Python and TypeScript projects scattered around that need constant dependency babysitting. Dependabot does a decent job but keeps missing Python pip security issues that pip-audit catches. The problem is pip-audit wants everything pinned to exact versions, but I prefer flexible >= constraints in my requirements files.

After getting tired of manually running security audits and then forgetting about them for months, I built this GitHub Actions workflow to handle it automatically. You can see it in action on my Shiny Quiz repository and Django demo application.

I’ve been doing more experimental stuff on my Windows 11 laptops lately - testing sketchy PowerShell scripts, trying out random software, and generally doing things that could completely wreck my system. While I have disk images for recovery, that’s a nuclear option that would cost me a day or two of rebuilding.

Turns out Windows has had a built-in solution for this exact problem: Windows Sandbox. It’s basically a lightweight, disposable VM that resets itself every time you close it. Perfect for testing things without the paranoia.

After my Windows 11 upgrade, I have a need for a quick way to start my screensaver but not lock my computer. So the Windows-L (lock) is not a desired options for this use-case. I want to quickly get back to my screen without logging back in.

I remember an old Windows NT tool and built-in MacOS feature called “Hot Corners” that let me do this by shoving my cursor to a corner of the screen. But I don’t want to load another tool for this. I’m using Power Toys “Mouse without Border” to link up a couple machines with virtual KVMs so the hot corners isn’t an option because of that.

So how do I solve this?